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ot, 

• #1, #2, 2/11, 2/12, 2/21, 2/22, 2 € 

• G,G':*IS m, GQG' 

• q.mm {G <D{tLm 

• 9i, 92 € G 

• c = Si* 1 ^ 13 , dt .= 9i yil 92 y ", d 2 = 9i y21 92 V22 , h = 0!*, 

• 7r:XixX 2 xM — »• G' : 1 *)" 1 

• 7T" 1 : lm(ir) — ► Xi x Xj x M 

ai||«2 < q (Vati € X\ y Vc*2 € X2) 



1 



2001-3109686 



#2001-009646 

(1) (mSM) lC*fLT, SLSSt 
[SC4] 

«i=»i r > "2 = fla"", e = ir{ax,a 2 ,m)h r , v = g i ai c T di aT d 2 mT 

(2) WK5f«#tt. fefli^T. 
[R5] 

?r(ai,a2> m/ ) = e / w i 2 

OfcS a'p a' 2> (a'jeXp «' 2 GX 2 , •*£«) fcfffcU 
[»63 

_ a' lu xi+a'yu+m'w! x 2 +a / » 1 2+Tn'y 32 _ y 



S«#<O^BB*S:fflV^Tai«5 s -*S:«*ft'r*4illi«lBiP**iSTf* 
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[»7] 

• xi, x 2 , 2/11, 3/12, 3/21, 3/22, z <= Z g 



• p,<Z : §5§ffc (g tt p- 1 OigBlfe) . 

• fll.02 G Zp : ordpG7l) = Ordp^) = 9 

• c = j! 11 ^ 12 mod p, di = 0i vu 32 ! '" mod p, d 2 = ji" 1 ^™ mod p, /i = gi* mod p, 

• k u ki,k s : jE5£& (lO* 1 " 1 -* 2 < q, 10* 3 < g, 10* 1+fcs+fc » < p) 

(1) ¥*■ (|m|=k 3 , fib|x|{ix©«ii!c5:*^) tcttLT, SLUt 

a=a 1 l|a 2 ( | a x | =k 1 , | a 2 I =kg) fc^figb, 
[KB] 

M = a||m 



MU 0] 

ui = Si r mod p, « 2 =fl2 r modp, e = Mh T mod p, v = g i ai c r di ar d2 mr mod p 
(2) tMBSte#tt, i#<7)^8f^gt5:fflV^T. *Bff^A*»&, 
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mi 1 ] 

a ill a 2ll m ' = e / u i z niodp 

a' v a 2 , m' (la^l-kp | a ' 2 1 =k g , |n' |=kg) £ffl¥U 
[»12] 

^i ttl *i^»iiWioi^*a+«'iria+m'i«a = t> (mod p) 
#*iti-*ltf ■' th (fib, o'-a'JIo^) , JSftL&tt*!, 

£fctt2lci3^T, ttrfB4*WflMltt, WfB3eM#£J*U <kHa-f£X 
[« 1 3 ] 



Srlff %> o T If-* U T«# L T £ < 
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[SSC 1 4 ] 

ui = gi r mod p, u 2 = ff2 r mod p, h r mod p, </i ai c r di ar mod p 

fcfff % o T tt« b T«# b T 33 < 
[»#*6] 

[»15] 

• ^l, #2, 2/11, 2/12, 2/21, 2/22, 2 € 



[R16] 

• G,G' : (mm) G<ZG' 

• q -.m®. (g amm 

• 9\,92 e.G 

• c = ^i Xl S2 X2 , di = 9i yil 92 yi1> , d 2 = 9i™ 1 g?* 22 , h = gi z , 

• jr:XixX 2 xM-*G': 1 # 1 

• 7r -1 : Im(7r) — > X\ x X* x M 



Jfe*4*BMt«:f&*L (fib, '»Gtt»G' Ogp^lft b, X 2 ttjE«E»*»&ft* 
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CKl||<*2 < Q (Vttl €. Xi, VQ!2 € X2) 



(1) ii^iitt^-^K (K<=M) iZMhX, SL££ 
[SSC18] 

«i = Si r , W2 = P2 r , e = ir(ai,a 2 ,/<:)/. r 1 w = ffi ai c r <*i aT <i2* r 
ft»b (fib, a = a 1 Ma 2 ) , $ <b tC, # mG9Hf-if;fcC£ ( 

mi 9] 

C = E K {m) 



ICTMI, (u p u 2 , e, v, C)§:Ht#S:i:bTtuIBSffi#(CjI«b, 

m2oy 

&Z>a' v a f 2 , r (a^GXp a' 2 GX 2 , K' eM) £ft»b, 



6 



ffilE#2 001-3109686 



#2001—009646 
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[SSC2 2] 

m = D K ,(C) 

r S #M -T £ * fit* j£o 
[R23] 

C = -Bjf(/(ai,a2)||m) 

t«24] 

/(o4,a4) = [l>jp(C)l* 
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CSC 2 5] 

m = [D K ,(C)]- k 

) 

f 

CI5JC2 6 ] 

• a;i,x 2 , 2/11,2/12, 2/21,2/22,2 e Z g 

[&2 7] 

• p,g : m&. (qttp-1 ro#g&) . 

• 9i,9i € Zp : ordp(si) = ordpfoa) = g 

• c = g 1 I >g2 IJ mod p, di = mod p, tfa = gx^g^ 13 mod p, h = </i* mod p, 

• fci.fc.fej : (l0* ,+fcj < 9, lO*^ < q, 10*1+**+** < p) 

st«#li£^-*K (|K|=k 3 , fiU|xhix©«ji5:$:*f ) (C*fUT, SLgfc 
a=a 1 l|a 2 ( | a x |=k 1> | a 2 |=k 2 ) 
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HR2 8] 

M = a\\K 

[UC29] 

ui = gi r mod p, t*2 — 92 r mod p, e = Mfr r mod p, v = 0i* n c r di ar d2 /O " mod p 

[»3 0] 

C = E K (rh) 

[R3 1] 

| 1 l-K'' = e/ui z mod p 

fc£ a'\, a' 2 , t (lo'jl-kj, |a , 2 l=k 2> |K' |=kg) SftfU 
[S3 2] 

5l e, iti 1 xl+a 'f ll+J< ''j« 1 U2 X2+a ' ! ' 12+J1£ '' Jm = v (mod p) 



9 



ffi!E#2 001-3109686 



#2001—009646 



[R3 3] 

m = D K >{C) 

3 £ 4tt* i: -r £ m 

[ft** 9] 
[R3 4 ] 

C = ^(/(ai,a 2 )IM 

[835] 

0 1 «iu 1 * 1+ ^"+*'w i u 2 X2+o ' m+iC ' w " = u (mod p), 
f(a' 1 , a ' 2 ) = [D K ,(C)] k 

«««fi-r*i4:*1ftfib (fib, fttktfy bffifflSffi^tSfefflilb, [x] k «x 
[«3 6] 

m=[D K ,(C)]- k 

) 
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0] 
1 l ] 

[»3 7] 

a j, a 2 (I a 1 |=k 1 , | a 2 |=k 2 ) , rGZqfcjlOs 
[»38] 

ui = $i r mod p, U2 = ff2 r mod p, A r mod p, 9i ai c r di ar mod p 

£ M % o T «■» U X «# L T fe < 
d i: £ #^ t -T £ ^BSttHf ^ 

[f*ai3i 

[2S3 9] 

• a:i,a;2, 2/1,2/2,2 e Z 9 



ffilE#2 001-3109686 



#2001-009646 



[»4 0] 

• g,c : we (*ao », gc(? 

• q : (G 

• Si,P2 € G 

• c = si 11 ^ 13 , <f = ai w S2 OT , h = fli', 

.ir:XixX 2 xM — ► Dom(£) : 1 *f 1 (Dom(£:) £ (D^a*c) 

• 5T- 1 : Im(jr) — » ^xX 2 xM 

• .ff : v^Hgc 

(fib, «W4»G' U 

[»4 1] 

<*i||a=2 < 9 (Vai e Xi, V<* 2 € X 2 ) 

(1) SU&o^GXp a 2 ex 2 , rezq&jitf, 

[»4 2] 

ui=gi T , u 2 = g 2 r , v = 5 i 0l c r tr r , K = H{h T ) 

ft&L (fib, a = a 1 l|a 2 ) , S 6 K, *m<0«F-» ACS ( 

[«4 3] 

C = ^K(7r(ai,«2,rn)) 

KTfMtU (u p u 2> ,v,C) &W*3t t LTtif8B5fc«#K:iS«U 

(2) tMB*«#tt, a*©K»fMI«:BV*T, 
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14 4] 

K' = H( Ul z ) 

14 5] 

7r(a / 1 ,a , 2 ,m / ) = ^(C) 

t£2>a' v o' 2 (a'jSX^ a' 2 £X 2 ) Srtf-JIU 
[»4 6] 

£i a,1 Ul Xl+Q ' S/1 «2 X2+a,y2 = v > 

3 k £ £: -t S Bf#aM*ffio 

[ff#3U4] 
14 7] 

• x u x2,yuy2,z e Z q 
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[84 8] 

• p,q : (qftp-l OUBSfc) . 

• 5i»92 € Zp : ordp(gi) = ord p (y 2 ) = q 

• c = #i Tl </2 X2 mod p, d = gi in 92 V2 mod p, h = gi z mod p, 

• Jbj.fca,** : Mffc (10*'+** < g , io*» < 9 , 10*i+*j+*s < p ) 

• if : Va.§5ffc 

• e ■. M^mm^tmm (e <nfemm\ziEmk^fr t-rz) 

(1) mmmte, fHm.a=a l \\a 2 (| a 1 l=k 1 ,|a 2 l=k 2 , fiU|x|ttxCD««S: 
HR4 9] 

Ui = g\ r mod p, «2 = 9i r mod p, v = c r d° r mod p, X — H[h r mod p) 

fetmcL, sac mm&it, mm?-9«om*-icc* wmm m^tmmz 

[R5 0] 

C = ^(ai||a 2 ||m) 

(2) ffriBg«#ii, a#<z>mmfcA^T'. 

[»5 1] 

IT' = H[u x z modp) 
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[»5 2] 



ailKHm' 



D K ,(C) 



a' 2 (lo'jl-kj, U' 2 l=k 2 ) ft ff J(0. 



[«5 3] 




v (mod p) 



jWfcSETfltf (fib, a* = a' 1 l|a' 2 ) , SSfftMitLIffiAU 
[»*SU 5] 

(S*S1 6] 

a 2 (a 1 eX 1 ,a 2 £X 2 ) , reZqftJgtf, Uj.u^e.v ftfff %, o Ttf-f£ b 

d t ft #m t -t -s 4«i»»-*#ife. 

a 2 (| a 1 l=k 1 ,| a 2 l=k 2 ) , reZqftStf, Uj.^.e.v ft tu=fo o TltH L T«# 

3 1 ft#^h-tS^g|gtBi#*a„ 

[iMis] 
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[R5 4] 

• Xl,X 2 , 3/1, 3/2 € Z q 

am* u sesc, 

C8SC5 5] 

. G : WfS » 

• q -.mik (G 

• n : Xi x. X 2 x M — ► Dom(E) : <Dom(.E) l±§SSc £ tfJSSSc) 

• ir -1 : Im(jr) — ► JTix^xJIf 

fc*4*§l*&f&*b (fib, WGttWG'OSMHfffcU 
[» 5 6 ] 

Q!i||Q!2 < <Z (Vai € Xt, V«2 € X2) 

(1) SL&a^Xp a 2 eX 2' r eZqfcatf, 

[15 7] 

«i = 9i r , u 2 = g2 r , v = gi ai c r cP r 

ft»L (fiU a = a 1 l|a 2 ) , S^IC, SHSt 1 - # ■©!»■»:*(;«: ( 
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[»5 8] 

e = £pfc(7r(ai,a 2 ,m)) 

(CTffr&U (u 1 ,u 2 ,e,v)S:HS^5:i:LTfafaS«#{Cj||«L, 
(2) KffaSfS#«, e*«D»ESHlf*S:«v^T, »«f*X^&, 
[159] 

7r(ai,a2,m') = £> s fc(e) 

ftSa'p a' 2 , m' (o'^Xj, a' 2 ex 2 , «'£M) SffSU 
[16 0] 

^ 1 a iw 1 aJl+a ^ 1 U 2 X2+at ' ?/2 = V 

#j*sci-fttf (fib, 

[16 1] 

a' = c*i||a2 

Mi9] 
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1S62] 

• sk : mnmwfe^r) m^itm 

[St 6 3 ] 

• P ,q : mm ( g ttp-i <nmmm . 

• 9i, m € Zp : ordp(si) = ordp(0 2 ) = 9 

• c = <ji Il fl2 XJ mod p, d = gr n g2 v> mod p, 

• fex, fc 2 : lEfegt (lO* 1 - 1 "* 3 < g) 

(1) a^a=a 1 ||a 2 ( | a x | =kj , | a 2 | =k 2 , ffl L| x| li x ©tff8t £ 

me 4] 

«i = mod p, «2 = 92 mod p, « = gi ai c r cP r mod p 

me 5] 

e = # p fc(o!i||a2||m) 

(2) ttfiHS«#«, %%<Dtm®m*m^T, mm^t>^, 
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me 6] 

a'llla&llm = D sk (e) 

tSLi> a' v a' 2 , m' (lo'^-kj, U' 2 |=k 2> ttiESER) fttfJItU, 
[»6 7] 

5 1 a 'iwi xi+a ' yi w 2 :r2 " , " 0!/|/2 = v (mod p), 

tfjA£-*MlU! (fib, 
[»6 8] 

a ; = ai||a2 

***imm£ LTm*-r^3i: swat 

[IM2 0] 

8*fe«i Qtcfi^r, atrial nfli4s», ttiasA##£jftb, 

[1*82 1] 

it 8 leaser, «ai«#ttK«p^*«:f^i«-r*K:afe»j, ^ftSLRoj. 

a 2 (ajeXj.agGXg) , rCZq^ay:, Oj.Ug.v fcfflrfe o Tff-J* LTfi# LT 

i £ Zm® £ t S 
[f#S2 2] 
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«, m&m^moi, «%mw-^mo2, n&mm^mo3, «w#©204, *=ey 

205, «fl^«206 > ^-ft;!g«108, ZCDiZfr, E^LT^fcH 

*\ m^tnnm*, m*, ^*if©#©tcj:»jsgiseco^s# (fit) tc^ 

-T £ «b CD ffi #I£g & fit A 3 „ 
[0 0 2 7] 

£f?#$lI£gioo, S^MiSmooti, ^-f^tcPUii^^U HZffiiLt-im 

isc^#gioi, m&f&^moi, ^^ft^#^202, w^»#©203ttvx-rixt; 

[0 0 2 8] 
[0 0 2 9]. 
[0 0 3 0] 

(*lt#! l ) 

[0 0 3 1] 

i. tt£fM&i 

[0 0 3 2] 
[»7 5] 

• X\, x 2 , 3/11, 3/12, 2/21,2/22, z <= Z 9 
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[0 0 3 3] 

[0 0 3 4] 
[»7 6] 

• g,g : mm mm) m, gqg 

•c = gi Xl gi x *, <*i - gi»"92 Vi7 , d 2 = 5i K1 s 2 ws , h = gi z , 

• tt:X 1 xX 2 xM —>G' : 1 2t 1 

• 7T- 1 : Im(-Tr) — ► X x x X 2 x M 

[0 0 3 5] 

[0 0 3 6] 
[17 7] 

<*i||<*2 < 5 (Vai € .Xi, Vot2 G -X2) 

[0 0 3 7] 

£?iifc-f 5,, Mtt^pir^raiif ^>), &li§«=fg£jl<llin&§!300&i:* 

2. Bt«#>fb®a 

(1) mm^mmmooit, mmmAowimzzv, (men) ic*fb-c, si 

02, m»#©103, »^JI»#©104?:M^T, 
[0 0 3 8] 
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[R7 8] 

«i=fli r , « 2 = S2 r , e = Tr(ai,a 2t m)h T , v = g 1 ^<fdi ar d 2 mr 
[0 0 3 9] 

StfJI-r* (fib, a = a 1 Ma 2 ) . StlC, #ffi&«100tt, £<S#A© 

^bT5t«#«Iifi«200K:aifl|-r*. 

t, S«#fl«6«200|*©/S£*Jit#«202, M«gtff#et203, M3I#S2043: JB 

[0 0 4 0] 
[R7 9] 

ir(a'i,a' 2 ,m') = e/ui* 

[0 0 4 1] 

&5 a' v a' 2 , (o'jeij,. a' 2 ex 2 , m'GM) fctfttU 
[0 0 4 2] 
[R80] 

^ 1 «i tti a:i+a'»ii+m / V2i ti2 X2+a'vi2+m'OTa — v 

[0 0 4 3] 

#f£££-f*lt*V i:LXffl;frL (fib, o'-o'jllo'g) , ^i£L 

4ttftB«l»*i Srfg^-f « B t U T HI A* 

[0 04 4] 

*H£*«fCJ:**ttT?tt. GfCfe»*Diffie-HellMn ft£|M®aMttfcflMI 

GlcasttSDiffie-Hellman jfcJgKgfcH:, r gj ,g 2 eG}C*f b T, 
[0 0 4 5] 
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ms i] 

D = {(Si.S2.ff» r ,S2 r ) I r e Z,}, R = {Qn,g2,9l TX ,92 r *) I n,r 2 € Z,, n ^ r 2 } 
[0 0 4 6] 

A^*^aTSB3Sj Diff ie-Hellman ^Bga&l/2 «fc *J fe&^flMST* 

M<Z.£t>mi>^££, Diff ie-Hellman Vkfemmitmn-? $> Z> £W ? (Diffie- 
Hellman &5fef^(CovT(i, Xil?13^(Cj£^e>4xT^S) „ 

*«Si:B«©*iSK:T) , Diff ie-Hellman ft£|Mfcft< T/U XAfc** 
Sfe, Diff ie-Hellman 8t^fS!/iI£fi¥< 7)VZtV UAci: Ltt, * 

•2>*li'J>&< ttiDiff ie-Hellman &£IHMfcft<6U:CBS'Cft6. 
[0 0 4 7 ] 

[0 0 4 8] 
[«8 2] 

wi=5i r , u 2 =92 r , h r , g x a ^c r d x ar 

[0 0 4 9] 

(§6ifc0>J 2 ) 

[0 0 5 0] 
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1. m^fum 

*##«Ii6*200rt(O»t^/«#S201tt, £«#b©»«*:j: y, ^ft, 

[0 0 5 1] 
[»83] 

• rci,X2, 2/n, 2/12, 2/22, 2; € Z q 

[0 0 5 2] 
&«MflHlfcfMtL, 
[0 0 5 3] 
[18 4] 

• p,q : mWt. (.qtip-1 (O^SgO . 

• 9l,92 € Zf : ordp(ffi) = ord p (g 2 ) = q 

• c = 5x* l 52 XJ mod p, di = ^i""^" 14 mod p, dj = gi tm 32 1 "" mod p, h = gi z mod p, 

• fci,fc2,Jt3 = 3EJ£# (10*1+** < q, 10*' < 9) 10*i +fc »+*' < p) 

[0 0 5 4] 

2. Bt«#ib®a 

(1) it«#f!f^SlO0lt, »«#A©*f^K:J:y. ¥*■ (|m|=k 3 , ffiUMtt 
x iCttUT, Sl«£j*#«101«:Bv*T, ftgjta-a^lag (| 0l 
|=k lf |a 2 l=k 2 ) 

[0 0 5 5] 
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[St 8 5] 

M = a\\m 

[0 0 5 6] 

©102, &$T#©103, »£«*#ai04S:JBHT, 
[0 0 5 7] 
[»8 6] 

«i = </i r mod p, U2 = ff2 r mod p, e = Mfi r mod p, v = ai <,1 c r di"*'d2 mr modV 
[0 0 5 8] 

2*>tC, afllMMlOOB-, aMMTA0>iiftlCj:U. (u^ug.e.v) 
fcl****: LT, jim^Sl06S:ffl^TiHIIlI«S300S:/M,TSff#B©SfI#M 
RS200K:i3«-r *. 
[0 0 5 9] 

(2) s«#i»ii£e2oott, s«#B©^#{cj:»j, uwhx\^±.mmm 

mmt, Sfi#{l!llS«200rtCO/<^*»#©202 ( «5^?R»#©203, &ff#©204 

[0 0 6 0] 
[18 7] 

a i I \ a 2 1 l m ' = e / w i* mod p 

[0 0 6 1] 

fc3 a' r a' 2 , m' (la'jl-kj, |a' 2 l=k 2 , |m' |=kg) SrfHIL, 
[0 0 6 2] 
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[188] 

gi ^i Ul Xl+a 'y il+m ' y * l uz X2+a ' yi3+m ' V2i = v (mod p) 

[0 0 6 3] 

» n * m^ir « b tt-sftra* t u t m a -r * . 

[0 0 6 4] 

#857*1*, i£##fl9gS«10<H*, iHM#A©^{C«fc»JHt#iC 
ftfPJft-rftKafey.-^i&aRop a 2 (| 0l l=k lf | a 2 l=k 2 ) , reZqfcigtf, 
[0 0 6 5] 
t»8 9] 

ui — gi r mod p, ti 2 — g% T mod p, ft r mod p, Pi a 'c r <<i ar mod p 
[0 0 6 6] 

(i^ife^J 3 ) 

*XJkM». Xatttt-? feffl^T. *yfe-S?©a##T?»* 

[0 0 6 7] 

i. m&j&ym 

[0 0 6 8] 
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CSSC 9 0] 

[0 0 6 9] 
[0 0 7 0] 

ma i] 

• g,c : ^ri® mm m. gqc 

• q-.m* (g <n®m 

• c = gi Xl ff2 X3 , <*i = 9i mi 92 V12 , d 2 = gi^92 V22 , h. = 

• A- 1 : Im(7r) — ► A - ! x X 2 x M 

[0 0 7 1] 

[0 0 7 2] 
[R9 2] 

ai||<*2 < 9 (Vai G Xi, Vc*2 € X2) 

[0 0 7 3] 
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2. m&^mm 

(1) SM#{BJ^@100ii, J3«#A0)»«sK:j:y, H^-*K (KGM) (C*fbT 

, ass:4*#aioi«:fflv^T, tsLRojexp a 2 ex 2' r ezq*atf, ^£siw 

#©102, «||#gl03, f«jfcai*#«104S:«V\T, 
[0 0 7 4] 
[SC9 3] 

«x=Pi r , «2=P2 P , e = 7r(Q 1) a 2 ,A')/» p , v = Sl ai c r rfi ar d 2 ' fr 
[0 0 7 5] 

UCE h © gt-r - # K £ ffl ^ T , 
[0 0 7 6] 
[194] 

C = E K (m) 

[0 0 7 7] 

v,C)&B|fJi:lT, »f§|ggl06 & « V NT a«0«S3OO S:^- b T §«#{MSt|g20 

(2) gmmwmmooit, sfs#B©£g^ic<fcy, ««?b-c^s±iaiumft« 

[0 0 7 8] 
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C»9 5] 

7r(ai||a' 2 ||/T') = e/ui J: 

[0 0 7 9] 

a' v a' 2 , K' (a'jGXp a' 2 £X 2 , K* GM) fettJH,. 
[0 0 8 0] 
[1*9 6] 

g 1 ^Ui Xl+Q ' Vll+K ' y21 U2 X2+a ' yi2+K ' y22 = V 

[0 0 8 1] 

HfititiL-rtUt (fib, a* =o' 1 l|o' 2 ) , 
[0 0 8 2] 
189 7] 

m = D K >(C) 

[0 0 8 3] 
[0 0 8 4] 

«p*AC©M*:6^<**i*i:bTt±. tfc&tt&l*. ISAACS: (*f#S) Sgf^-ffc 

[0 0 8 5 ] 
[R9 8] 

C = E K (ai\\a 2 \\m) 
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[0 0 8 6] 
[0 0 8 7] 

m$ 9] 



[0 0 8 8] 



#5££-rs;ii:£&Jcb (fib, [x] k (ix©±fikfij$:«-r o ) , ^S^/Ulfc 



[0 0 8 9] 
[SitlOO] 



m= [D K ,(C)]-( kl+k2) 



[0 0 9 0] 

(CfcD, «^fb§:«e)o fib, [x] _k l±x©±^WS:|g?VNfcSE^JS:*-ro 
[0 0 9 1 ] 

[0 0 9 2] 
[IK10 1] 

[0 0 9 3] 

A a £ * (S K m <b b #L3i B# n £ 5 d i: # ^ lite & £ . 

*mmM\t, &mmm^ (M®>mm^) zm^t, tv-t-vammm-e&z 

3 6 ffil£#2 0 0 1 - 3 1 0 9 6 8 6 
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[0 0 9 4] 

-r. 

1. m*£m.%km 

[0 0 9 5] 

m i o 2 ] 

• Xi,X2,yil,yi2,2/21,2/22,2 € Z 9 

[0 0 9 6] 
[0 0 9 7] 

KK103] 

. p, g : *« (g ttp- 1 *>3fia&) . 

• ffi, 52 e Zp : ordp(ffi) = ordptaO = q 

• c = 9i* l ga IJ mod p, di = gi vil &i v " mod p, d 2 = Pi Wl ff2 VM mod p, /» = 01* mod p, 

• Jfc1.fe2.fc3 : iE5£» (10*' +fca < g, 10*» < q, 10*' +fcj+A * <p) 

[0 0 9 8] 

«s<z>«$b(c^t«:, 205 tc teas -r^. 

2. Bf^-fb^S 

(1) i£f5#«£@10(H;i:, itfS#A©SI#(C«fc »J, gg^-#K (|K|=k 3 , -fiblx 
U±x©«Ji!tS:^-ro ) lC*fLT, gU&£j£#©101&;S^T, SLgfc o = o j 1 1 a 2 
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(|a 1 l=k 1 ,|a 2 l=k 2 ) zmtf, 
[0 0 9 9] 



[S104] 



M = a\\K 



[0 10 0] 

©102, ?g»#S103, S!bk&||#S104S:;iV^, 
[0101] 
[810 5] 

tii = g\ mod p, U2 = 32*" mod p, e = M/» r mod p, v = gi ai <?d\ ar di mr mod p 
[0 10 2] 

[010.3] 
[810 6] 



[0104] 

tCTfmU (u 1( u 2 ,e,v,C)S:Bt#5:i:bT, iMgiSl06 ^Tit#tl]«g300 
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[0 10 5] 
[«10 7] 

tt'ill^ll^' = e / u i z modp 

[0 10 6] 

a' v a' 2 , K* (la^hkp lo'gl-kg. |K' |=k 3 ) £ft*U 
[0 10 7] 
[|& 1 0 8 ] 

gjO^^i^'m+A-'vai^+o^a+lf'^ = w (mod p) 

[0 10 8] 
#J*3iTf-;ftlf (fib, a ' = « ' x 1 1 «x • 2 ) , 
[0109] 
[1109] 

m = D K > (C) 

[0 110] 
[0 111] 

**XC©aa«s*fPi«*«i:bTH:. SIMM:. Hf^^cfe (SfffcS) B&#fbW 

«E i: ■€■ fflif - * K & flj V ^ T , 
[0 112] 
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[Riio] 

C = 'JSk(ai||aa||JiO 

[0 113] 

[0114] 
[till] 

pi a itii Il+a ' yil+J< " y21 U2 X2+0, ' s ' ,a+if ' W2 = u (mod p), 
a;iK = [^(C)] fc ^^ 

[0 115] 

[0 116] 
[8112] 

m=.[ZMCfl~ ( * 1+fca) 

[0 117] 
[0 118] 

fefPrt-TfiCafcy, ^»a»a lf a 2 (|a 1 l=k 1> |a 2 l=k 2 ) , rfEZqSrgtf, 
[0 119] 
[8113] 

«i = yi r mod p, U2 = Qi T mod p, h r mod p, ^i ai c r <li a,r mod p 
[0 12 0] 
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mmm 5 ) 

iz&-DTmmi-zmiiizn\,^xmw-?2>. xmrnmizztnz, mmm3<D^mz 
it^x^mmzmn, M^mm^m^^xmizMLxm^i ond-cpa) x& 

&5£Bf^ (NM-CCA2) X'&2>Z.£tfUWX'£Z> a *^J6^JlC«k^ 

ttxit, mK&JSr*mm?2><ox\3.te<, &«tfttf&x&z>£-oizi/-Fzpk 

[0121] 

mat, *mmmo>i'*Ti»mf&z:B-i-. 
i. m&f&i&m 

[0 12 2] 

mi 1 4] 

• #1,^2, 2/i,2/2,z € Z g 

[0 12 3] 
[0 12 4] 
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[»115] 

• g,g ■. mm mm) m. ccc 

• q : m%L {G <D$LW) 
•Si. 52 € G 

• c = ff i*»S2 13 , d = gi*gtf*, h = gx', 

• ir^jxXaxM^ Dom(£) : 1 ft 1 (Dom(£) (iH3S JS COi£»g) 

• jt" 1 : Im(?r) -+X,xjr 2 xM 

• J7 : ^7->3SS 

[0 12 5] 

[0 12 6] 
[E116] 

<*i||<*2 < Q (Vai G Xi, Va2 € X 2 ) 

[0 12 7] 

5ifet%©i:tS. ) , ^ggW#5:il«tlI«S!300«:i:*$:/rUTm*b, 
2. Bgf*S#-fbfl!3t 

(1) &«#{B!H8£©10<Hi, j£ft#Affli£mcJ:>J, mm?-** («.GH, Mli¥ 
*a»ISI> lC*fLT, SLSt^^SlOlSrffl^T, SLgta^Xp « 2 GX 2 , r^Zq 

[0 12 8] 
[UC117] 

ui = 9i r , u 2 = g 2 r , v = 9l Ql c r d ar , K = H(h r ) 
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<fiU a = a 1 l|a 2 ) , SHIf 1 - * m<Z>Bf#;S:CS: (**»S!) Wf#fbH 

[0 13 0] 
[R118] 

C = £?/f(7r(ai,c*2,m)) 

[0131] 

v , C) S: Bf-if £ i: L T , m 106 £ ffl H T »«|g||R300 S«#WS»20 

(2) g«#{ffl§£g20<Hi, SWBWfJMtUCfcy, «#UT<r**±«J»tiMf« 
t, 5*«#«8«200|*©'<g*##«202. «*^»#©203, M##m204$:ffl 

[0132] 
[K119] 

i<:' = if(ui*) 

[0 13 3] 

[0134] 
[812 0] 

7T(ai ,^2,771') =D K ,{C) 

[0 13 5] 
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&-5 a'p a' 2 (as'jCEXj, a'gGXg) 3cif3¥L, 
[0 13 6] 
[R12 1] 

Pi a iUi a:i+a ^ 1 W2 :C2+a ' S ' 2 = t/, 

[0 13 7] 
tfj&ft-rtltf (fib, a'-a'jlla^) , 

[0 13 8] 

*HiSMtcj:^*ST'tt, M«#M^eiooii, J?|fB#A©iBfNC «fc 
»J«P^*S:ff«i-*JCafcy, ^ttaRojeXp i 2 GX 2 , reZq£>§tf, u r u 

6 ) 

[0139] 

•r. 

i. m£.&fn>m 

SfS#<MI§B200|^©lt^^#®201{±, S«#Bo»ff»cJ:y, ^sb, 

[0 14 0] 
[«12 2] 

• #1, #2,2/1,2/2,* € Z g 
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[0 1 4 1 ] 

[0 14 2] 
[R12 3] 

• p,q : m& (q 14 p - 1 ®3SsH$0 . 

• 51,52 € Zp : ordp^i) = ordp(</ 2 ) = 9 

• c = gi xl g2 X2 mod p, d = <7i I/1 <72 V2 mod p, h = g\ z mod p, 

• : *r«MHHfcB8» os**r±jE«afc^fl: 1 1-5) 

[0 14 3] 
2. Bf1g#ffc«l3I 

»te#«««iooti, a ©safety. finicMiT, SLR£j*#«ioi 

Sffl^T, SLS!Ca = a 1 l| a 2 (I o jl-kj, | o 2 |-k 2 , L I x| l± x ©#r!&&*-r ) 

02, &3I^@103, *J*«*#«104«:»V*T, 
[0144] 
[1124] 

Ui = 8i T mod P> «2 = 52' mod p, w = gi ai c r <P T mod p, A" = H(V mod p) 
[0 14 5] 

[0 14 6] 
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CISC 1 2 5] 

C = EKi^W^Wm) 

[0 14 7] 
[0 14 8] 

S«#«SS*200|*©*£3||JMMa202, »^M»*©203, «##©204§:ffl V%T 

» 

[0149] 
W12B] 

if' = H (u x z mod p) 

[0 15 0] 

[0151] 
112 7] 

ai||a' 2 ||m' = IV(C) 

[0 15 2] 

fc£ a'p a' 2 (I a 9 1 \=k v |a' 2 l=k 2 ) SItIL, 
[0 15 3] 
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[Rl 2 8] 

g 1 <u 1 Xl+a ' yi u 2 X2+a ' wt = v (mod p) 

[0154] 
ififitt-ttlli (fib, a* = o' 1 l|a' 2 ) , 

[0 15 5] 

yB»-93C«:fP«-r.*tcS&»;, ^*SH.«o lt a 2 (| ajhkj.l a 2 l=k 2 ), reZq& 
SO?, Ul ,u 2 , ,v$:t&t.oTlt»UT^#L/TS< ril^nrtgT'&S. iflfCj: 

jaii«i^«^fe»witi»*fc«©#*Hiaii»*femv^T, 

* (NM-CPA) (NM-CCA2) fcSEf*-*-* £ S. 

[0 15 6] 

i. et^fiR«ta 

seA#«»C2ooAa>lt£jA#S2om, a«#B©»ff»cJ: y, 

[0 15 7] 
[Rl 2 9] 

• sk : (^^MBt-^-) m^fcit 

[0 15 8] 
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[0159] 
[1130] 

• g wis mm) m 

• q : (.G (O&Mc.) 

• 91,92 eG 

• c = gi Xl g2 Xi , d = si«S2 w , 

• w : Xi x X 2 x M — Dom(£7) : 1 *f 1 ^« (Dom(JE:) «HS: E <D3£g*£) 

• ff- 1 : Im(ir) — ► X x x X 2 x M 

[0 16 0] 

(fib, S¥G&8EG'©g|S#S¥i:U x p x 2 ttiE$liS[^e>& 

[0 1 6 1 ] 
[1131] 

<*l||Q!2 < 9 0^*1 e -^1> V<*2 E X-i) 

u ai«#«ig«ioo^iSfsf *fctt4*H-r*. ^ws^tLt, m 
(i) ii«#Miseioo(±, is«#A©^#tc«k ij, sl84j*#«ioi«:ji^t, 

aSojG^, a 2 GX 2 , r<EZq£31tf, *g***«102, fll**«103, fU&Sl 
[0 16 2] 
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CSSC 1 3 2] 

t*i = 9\, u 2 = g2 r , v = gi ai c r d? r 



e = E pk (ir(oti,oi2,rn)) 

(2) S«#ffl3^B200tt, g##B<Z)|gf^Cj:»J, #t#bTV>£ ±«»«W * 
SM#{RSS«200«CD^^*^#m202, *g£K3!£#J8203, jUff #©204 & JS 

[0165] ' 
[^134] 

ni^a^m') = D sk (e) 

[0 16 6] 

&5 a'p a' 2 , m* (a'jSXp a' 2 6X 2 , ii'GM) fctNgb, 
[0 16 7] 



[0 16 3] 
Srlt®b (fib, a = 

[0164] 
CSt 1 3 3] 
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[«1 3 5] 

g 1 a iu 1 Xl+a ' yi u 2 X2+a ' y2 = v 

[0 16 8] 

[0169] 
1.13 6] 

[0 17 0] 

BlOOii, jS«#A©»ffK:j:»;i«-&XS:ff«'r*»cafe*J, ^ftaRa^x^ 
« 2 GX 2 , reZq&jgtf, u 1> u 2 ,v$:tu ; fcoTltSCbT'K#LTe< *I £ #l«rfBT? 

(SHifcM 8 ) 

*fttt#9tt, 9dliM7£:n«IK:, &J£0! 2 T^^fe^P^HB&^Sr^-XtC^M 

«7 f -*i"fel«-»a#K:j:oTaifi'r**-&JC-3^T»9i-r*. 
[0171] 

01 fit, *S6JIS«©S'^'T-A*j«S:n<-r. @6li, *£M(Z>«S&j3% 

•To 

a«#fl!lS6*200rt©«64«#«201tt, *«#B©»flsfC«fc»; t 
[0 17 2] 
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[St 1 3 7] 

• xi,x 2 , 3/2 € Z 9 

[0 17 3] 

[0174] 
[»1 3 8] 

• P ,q: m& (qtep-i<vmm$o . 

•9u92€Zp - OTdp(gi) = ordp(<te) = q 

• c = 3i Zl 52 zl mod p, d= </i vl <ft 1 ' 2 mod p, 

• fci,Jfe 2 : jEJ£* (10* l+ ** <g) 

[0 17 5] 

&S4*HflMlfcfftftU &MW*^««l§I*300*££^LTfli*U i£«#{BU 
»«100/sjaif*'t«*», *fe«^Bi-rS„ 4iBli-**iStUT, «*.tf«S3# ( 

2. 4Mk*ftM 

S6fll#«««100»t, ««#A©*flMCj:»J, SL«£j*#«101«:B^T. SLR a 
= a 1 l|a 2 (lojl-kj.ldgl-kg, fiU|x| IS xOftrft £3Stf, 3«ilC, 
SL»£j*#*101feJ§V*T, SLH& rSZqSaof, ^**HC*ai02, §CJt^©103 
, «&i**#«104«:MV*T, 
[0 17 6] 
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[«1 3 9] 

ui — gi r mod p, «2 = 92 r mod p, v = 3i ai c r d ar mod p 
[0177] 

[0 17 8] 
CISC 1 4 0] 

e = £^fc(cKi||a 2 ||m) 

[0 17 9] 

CTffai;, (u 1 ,u 2 ,e,v)$:Bt-^35:i:bT, JS«^gl06&ffl UTiHf 01*300 «: 
[0 18 0] 

Sfi#ffi!ligfi200i;fc, S«#B©^(ciU, #8rl/Tn*±I3»aMt«i: 

[0181] 
[» 1 4 1 ] 

ail|o4||m = Z? db (c) 

[0 18 2] 

fc£ *' v a' 2 , m (lo'^-kp |a f 2 l=k 2f m' ttiE»») HtSU 
[0 18 3] 
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[St 1 4 2] 

g l a 'iUi xl+a ' Vl U2 X * +a ' y * = v (mod p), 

[0 18 4] 
*^fi-T4X« (fib, 
[0 18 5] 
[R14 3] 

a' = ai||Q!2 

[0 18 6] 

glOOli, a«#A©iiffJCJ:»JI«**«:ff/*f *CSfeiJ, TftftSoj, e» 2 
(I aj-k^l a 2 l=k 2 ) , reZq££tf, Uj ,u 2 , v&fftti o Tit* bT £ 

[0 18 7] 
[0 18 8] 

[0 18 9] 
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#6£lC J; »J Bg^-fb 3 ft"C §«#© ftlt«8JCj£f§ $ ft 5 . 
[0 19 0] 

-etDffitcfe, tJe*fflPir#it:fe*f5^fcftT^.5^^^i'^^A{cjgM-r^cii: 
[0191] 

[0 19 2] 

^ifcjcj: yfTfrft-S*©*: LTlftWLfctf, ^ny5A£fJtii&<, ^-Tftfr 
*<A- K-?i7ft3tlfeSIgST'*ot, ffiCSlgf^, CPU£, ^-#© 

[0 19 3] 
[^^©^*] 

»»c*fUTSc^"Tf»«ri:«««iESftfe«&s|s»*Bt-*a«4:, -?-©fS/§l£fi, S/ 

can 

[02] 
[03] 
[04] 
[05] 
[06] 

5 4 fflSMt 2001-310 9686 
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i o o -ans#flj3£g, i o i "xkmmwms i o o rtosa.»^ia#«, i o 2 
-mmmwmw 1 0 0 wcD^nm^©, 1 0 3 -mm&mmm. 1 0 0 pwmn 

1 0 4 •••&«#«£« 1 0 0 A®M*K*#JK, i0 5-3fflf«8ii 

oowc^t'j, 1 0 e 1 0 0 \H<Dmmms, io7-a«t« 

igioort©Ai)gf, 1 0 8 -."&MMHI 1 0 0 «©Bff#ft^S. 200 

-afli#«s6«, 2 0 1 -gmmmmw 200 ^<ogt^#®, 202 

fiJISB 200 203 -§fS#W!£e 200 rt<z>S9i£««#S 

, 2 0 4-Sff«g2 0 0rtC!)S»m 2 0 5-S«#«S6*2 0 0«O 
**U, 2 0 6 -SifIlS2 0 Ort©ilMSfi, 2 0 7-g«#««B2 0 

o rt©«^fc^s, 300 -aeiani. 
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